From owner-freebsd-questions@FreeBSD.ORG Mon Mar 24 23:14:05 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3CA511065673 for ; Mon, 24 Mar 2008 23:14:05 +0000 (UTC) (envelope-from pcloches@gmail.com) Received: from qb-out-0506.google.com (qb-out-0506.google.com [72.14.204.233]) by mx1.freebsd.org (Postfix) with ESMTP id C979E8FC12 for ; Mon, 24 Mar 2008 23:14:04 +0000 (UTC) (envelope-from pcloches@gmail.com) Received: by qb-out-0506.google.com with SMTP id a10so5549886qbd.7 for ; Mon, 24 Mar 2008 16:14:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; bh=oQYWPcbQNoPKjvgZDTZgMVS8ybCR3mrB3I5q3SghpJI=; b=RpRs1grs4wUYu+vQqGk6BKO+j50oHRtZuRv1j9Rp4bjdA60oZiJN2FPh2aP6hLN1UcT7LXgtm6KTYAY/T+t3KwjAfNhW9NRjJmt9YdT9c9z9F1sEQUOfRFFoqbbqXNtMJ1WglYBe9IfchMRZMm3QTjfKZsAa+vlcVh/e6DaLoGQ= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=EMKpqRO1wPRFk4RfLhonKUx3hbt+19Gg94sN0PON99rUGxK3K31N8yqKeKpPIST7Pik9+BvJWcmzWXBD1nC+G8C4TfggemsrljqHLV4iWQk2NvQfHMZ3FhPALW55lm/yiYFW1dwiOp7WdhTDSnHGG+BezxdOYXWH+va2vhrC5Dk= Received: by 10.115.58.1 with SMTP id l1mr12892335wak.110.1206400443738; Mon, 24 Mar 2008 16:14:03 -0700 (PDT) Received: by 10.114.195.4 with HTTP; Mon, 24 Mar 2008 16:14:03 -0700 (PDT) Message-ID: <34394a3a0803241614q160b9968vebab8bd4f4fb53f0@mail.gmail.com> Date: Mon, 24 Mar 2008 16:14:03 -0700 From: "Patrick C" To: "Tim Judd" In-Reply-To: <47E83215.8030705@gmail.com> MIME-Version: 1.0 References: <8f82c35c0803231523i52e55906tfd3cf96b36fe70d7@mail.gmail.com> <8f82c35c0803231526n5a429cb5t1c81a7f98dfb19ea@mail.gmail.com> <8f82c35c0803241540k36c8d551tfcfd172d6a4a7f9b@mail.gmail.com> <47E83215.8030705@gmail.com> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: Jon Theil Nielsen , freebsd-questions@freebsd.org Subject: Re: A general purpose LDAP solution? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Mar 2008 23:14:05 -0000 I'd be interested in a read. I am currently using NIS/YP with FreeBSD servers and Linux clients... makes things very interesting. I've been meaning to exploit PAM for a more modern solution but it hasn't been a huge priority. Is there any support for built-in redundancy on the server level? I just need changes replicated, CARP can handle failover. -Patrick On 24/03/2008, Tim Judd wrote: > > Jon Theil Nielsen wrote: > > I asked this on freebsd-net@ but got no replies. So now I ask the same > > question here. > > > >> Hi list! > >> > > > > > > I have speculated a lot about implementation of (Open)LDAP on my > > > sever. By I haven't yet found the right (and logical) way to do it. > > > I'm running FreeBSD 7.0-Release with some different server > applications > > > - Samba PDC > > > - Virtual mail server (Postfix, MySQL, Courier-IMAP) > > > - VPN (currently with mpd4) > > > - Apache-2.2.8 web server (with PHP and MySQL) > > > I would like to implement LDAP for: > > > - authentication of UNIX/login users > > > - authentication of Samba users > > > - authentication/authorization of virtual mail users > > > For the first part, I got useful information from a previsous thread > > > ( > http://unix.derkeiler.com/Mailing-Lists/FreeBSD/questions/2008-02/msg01047.html > ) > > > and for the second part, i guess there is sufficient howtos to make > it > > > work. > > > My biggest question right now is if is possible to combine all three > > > things in one data structure. And which in which order I should make > > > the different implimentions. > > > Excuse my total lack of understanding, but is it possible to have a > > > structure with a superior unit such as OU= which > > > could contain several virtual domains and the actual doamin for my > > > PDC? > > > > > > -- > > > Jon Theil Nielsen > > > > Oh, i forgot one more thing: I would also like to be able to > > authenticate VPN users the same way. > > -- > > Jon Theil Nielsen > > > > > It's easy to find out if LDAP is a global solution for you. See if LDAP > is an available option in each port's config. > > I just finished setting up a LDAP-based email system. Samba is capable, > unix logins are capable. There's a good chance everything is. > > I liked the virtual part of everything, so I stopped after getting email > working. I didn't want to open up my system to all sorts of unix/samba > logins that might exploit or give me problems. > > The email system I documented isn't ready for publishing. I'm having > some select friends review it and proofread it first. > > If there's any interest here, I will provide a 2nd publishing to the > general public as a draft. Not to be used exclusively yet. > > Jon, you should be able to get most if not all of it working though. > > > --Tim > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org" >